admin/MaxKey
1
0
Fork 0
mirror of https://gitee.com/dromara/MaxKey.git synced 2025-12-08 01:48:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

!35 权限提升问题修复

Browse Source 
Merge pull request !35 from Aiya/main
This commit is contained in:
Meitner 2024-01-03 06:13:21 +00:00 committed by Gitee
commit fc5924154e
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
maxkey-webs/maxkey-web-maxkey/src/main/java/org/dromara/maxkey/web/contorller/ChangePasswodController.java
View File

@ -69,7 +69,9 @@ public class ChangePasswodController {
public ResponseEntity<?> changePasswod( public ResponseEntity<?> changePasswod(
@RequestBody ChangePassword changePassword, @RequestBody ChangePassword changePassword,
@CurrentUser UserInfo currentUser) { @CurrentUser UserInfo currentUser) {
if(!currentUser.getId().equals(changePassword.getId())){
return null;
}
changePassword.setUserId(currentUser.getId()); changePassword.setUserId(currentUser.getId());
changePassword.setUsername(currentUser.getUsername()); changePassword.setUsername(currentUser.getUsername());
changePassword.setInstId(currentUser.getInstId()); changePassword.setInstId(currentUser.getInstId());

4
maxkey-webs/maxkey-web-maxkey/src/main/java/org/dromara/maxkey/web/contorller/ProfileController.java
View File

@ -66,7 +66,9 @@ public class ProfileController {
@CurrentUser UserInfo currentUser, @CurrentUser UserInfo currentUser,
BindingResult result) { BindingResult result) {
logger.debug(userInfo.toString()); logger.debug(userInfo.toString());
if(!currentUser.getId().equals(userInfo.getId())){
return null;
}
// if(userInfo.getExtraAttributeValue()!=null){ // if(userInfo.getExtraAttributeValue()!=null){
// String []extraAttributeLabel=userInfo.getExtraAttributeName().split(","); // String []extraAttributeLabel=userInfo.getExtraAttributeName().split(",");
// String []extraAttributeValue=userInfo.getExtraAttributeValue().split(","); // String []extraAttributeValue=userInfo.getExtraAttributeValue().split(",");